Behavioral task
behavioral1
Sample
749c1f14c82e49ad588ba9d42421e88f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
749c1f14c82e49ad588ba9d42421e88f_JaffaCakes118
-
Size
84KB
-
MD5
749c1f14c82e49ad588ba9d42421e88f
-
SHA1
4564e4d7e94b2df4e5048e5b12522f3aeb20b509
-
SHA256
7122eb26a975033b6c043d786ac96364949ee6aaddd19e85e8ac54fe1a05ab6c
-
SHA512
01ce6b1ce429b5a76d9104e6a0cd769609b6f4990926516998dc67aa5733734df89c01594f74ad3a77b69b8435e98dc68ec9e2b1c80c79988d5098fe7a37ab55
-
SSDEEP
1536:KwBgx727k9yQL/Xhap3QDBiec62wI3dfBT0t4mIcjAT8Zh:K8gx76iyC/Xhap3uBiec62wIBT65l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 749c1f14c82e49ad588ba9d42421e88f_JaffaCakes118
Files
-
749c1f14c82e49ad588ba9d42421e88f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE